Microsoft Knowledge Base Article 281271 contains the following Description:

In the following scenario, if a user from the same domain as a Root Certification Authority (CA) requests a certificate, the issued certificate is published in Active Directory. However, if the user is from a child domain, this process is not...